Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
File: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (raw, json)
Hash identifier: 794X+tkDxq5dXqVsFreEvhAC3ax9kT3Th7D7WJwqT9Y=
Subject key identifier: 80:80:EE:AF:AB:84:7A:CF:34:14:D2:96:51:AC:C0:30:02:AF:9B:DF
Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial: 010D0C9F432858487CEB2215D0E6D98B8DA43A00
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 27313
IP address blocks: 204.79.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:22:15:d0:e6:d9:8b:8d:a4:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a9cbee13-4327-4917-8d8b-49bbe544b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:c1:8a:58:3b:f2:dc:81:c3:3f:57:c7:71:
fa:56:c5:39:a7:9d:c1:5a:fb:d3:92:1f:3a:f0:f5:
2d:2a:eb:38:f5:57:1f:93:78:96:50:19:90:5a:36:
1f:7f:6c:31:e3:de:d3:57:3f:75:65:78:42:38:41:
40:ee:12:95:1c:f3:38:49:8c:02:3f:e1:d2:32:ad:
c4:d9:58:84:16:d0:5b:96:1d:a9:d5:7a:17:53:16:
1f:e6:91:fd:b4:ac:27:e0:a6:3b:88:98:d2:d6:19:
74:d2:fa:81:44:eb:0a:bd:9f:d5:1e:41:e3:00:76:
09:23:ba:40:db:e5:d4:8a:b3:c8:be:cd:d1:0c:2d:
32:76:4f:ff:34:ec:58:a6:7d:e3:d6:bf:6e:9e:18:
4d:38:d1:b7:0f:d7:fb:40:15:c3:40:af:b0:bc:0a:
d0:ce:b3:2d:a1:9f:57:16:fc:8e:62:fd:a6:b2:87:
8d:18:81:f7:cd:9b:0e:1e:a9:06:81:38:c3:d6:d2:
47:17:7a:10:96:3f:bc:99:14:48:ad:d3:db:d4:b3:
90:b7:7b:a9:18:cc:1c:be:b2:74:2e:a8:57:ba:e7:
d3:ed:a6:9e:13:39:63:8b:80:95:90:d7:e2:f3:e0:
95:02:f9:0d:1e:f9:72:cd:4b:92:24:2c:d7:10:b8:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:EE:AF:AB:84:7A:CF:34:14:D2:96:51:AC:C0:30:02:AF:9B:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
X509v3 Authority Key Identifier:
keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
sbgp-ipAddrBlock: critical
IPv4:
204.79.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:b0:fb:1a:2f:c5:15:ff:bd:b4:78:80:b0:9e:c9:6f:b9:e1:
82:d7:a6:ca:4f:1f:f2:89:62:bc:ea:3b:c5:e4:43:5a:c3:8a:
a0:e3:db:8b:e4:53:eb:55:68:fa:80:c7:7d:c5:6e:46:1e:ec:
28:7d:08:7e:65:52:ed:0b:66:93:d2:09:4e:77:bb:89:a8:0a:
fb:48:38:6c:db:7e:3e:85:e1:38:28:2a:d0:2f:d2:cb:c4:92:
53:42:38:d2:49:15:a8:0c:dc:69:9d:d5:34:e1:df:65:7b:4f:
0d:81:44:87:57:66:3c:d5:3b:17:98:ce:14:4c:29:f0:df:ad:
5f:bd:86:55:b5:05:7f:41:dd:92:61:3a:06:7c:27:20:8a:1d:
1d:a2:46:d7:74:cc:8a:3e:86:7d:bb:d7:55:20:df:63:b7:4b:
e5:4a:55:23:f9:b8:1d:27:7c:db:38:ac:be:4f:45:96:15:47:
7a:b5:a8:9f:7a:f2:88:fb:1c:17:9c:82:64:f5:6f:b9:57:5e:
74:76:0a:03:59:25:76:bd:2b:ab:9e:3a:c8:60:ee:e1:13:e7:
28:07:90:b9:0a:0e:70:3d:3e:22:bd:d0:e7:68:18:ed:a1:38:
c4:57:14:13:07:0e:4c:94:ed:43:da:2a:38:37:4d:d0:3f:4c:
f9:71:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:27 2025 by rpki-client